Effective August 25, 2026 · Last updated August 25, 2026
This describes what Enter collects, why, and what happens to it. It is written to be read rather than to be survived. Enter is operated by Sigma7 Group, Inc. ("Enter", "we", "us"), and where this policy says we do something, that is the company doing it.
Two kinds of people are involved
Enter sits on a business's website and talks to that business's visitors. So there are two relationships here and they are not the same one.
If you run a business that uses Enter, you are our customer. If you talked to Enter on somebody's website, you are their customer — the business is the one deciding what happens to your details, and we hold them on that business's behalf.
Where a business has put Enter on its website, that business decides what is collected and what is done with it. We process it for them, under our agreement with them. If you want your details changed or removed, they are the right first stop; contact us as well and we will help them do it.
This policy also covers people who simply visit enterhq.ai without using the product.
What we collect from a conversation
Whatever the visitor tells the agent: their name, phone number, email, service address, what has gone wrong, and when they would like someone to come. Plus the conversation itself, in full.
We also store one-way hashes of the phone number and email. Those exist so we can tell that the same person came back within seven days and not charge the business twice for one job. The hash cannot be turned back into the number or the address it came from.
We collect ordinary technical information when the widget or the dashboard is used — IP address, browser and device type, timestamps, and which parts of the product were used. We use it to run the service, keep it secure, and work out what is broken.
What we collect from a business
The account details you give us: your name, your email, your business name, your website, and the configuration you build — the services you take on, the prices you have written down, your hours and your service area.
If and when Enter charges for use, payment details are handled by our payment processor. We do not store full card numbers.
What the widget does not do
It does not read the page it is sitting on. It runs inside a sealed frame that sends no referrer, and the only thing it knows about the host page is the path, which the server validates anyway.
It does not follow anyone around the internet. There is no advertising pixel in it and no third-party tracker.
It does not answer a phone, connect to a calendar, or book anything.
How the conversation is generated
Replies are generated by a large language model. To produce one, the conversation so far and the business's configuration are sent to our model provider, which returns the next reply.
Our model provider is contractually barred from using that content to train general-purpose models.
A language model can be wrong, and it can misunderstand what somebody typed. What the agent is allowed to say is bounded by the configuration the business supplies — it quotes only prices that have been written down and accepts only services that have been switched on — but bounded is not the same as infallible. Nothing the agent says should be treated as a quote, a commitment, or professional advice.
This website
Two things run on this site. One is an analytics tool served from this domain, with no cookies and no cross-site identifier. It counts page views. It does not build a profile of you.
The other is the support widget in the corner, which is Cove — a separate product, loaded from covehq.app. It is how you reach a person about Enter, and it is a third party. It loads on every page whether or not you open it, opens a session with Cove's servers when it does, and keeps an identifier in your browser's local storage — not a cookie — so a conversation stays together as you move between pages. It also pulls a font from Google. Anything you type into it goes to Cove, who process it so that we can answer you.
If the Enter widget is running on this site, a conversation you have with it is stored the same way any other conversation is.
None of that is part of Enter. The widget you install on your own website loads no third-party code, sets no advertising pixel, and carries neither Cove nor this site's analytics with it. What runs on enterhq.ai is our choice for our own marketing site, and it stops here.
Who else sees it
We use a small number of service providers to run Enter. Each sees only what it needs to do its job, and each is under contractual confidentiality and security obligations.
Anthropic — generates the agent's replies from the conversation and the business's configuration.
Xano — hosts the application and the database where conversations, contacts and configuration are stored.
Resend — delivers the lead emails and account email.
Vercel — hosts this marketing website and provides its cookieless analytics.
Cove — runs the support widget on enterhq.ai and holds the support conversations you have in it. It is on this marketing site only; it is not part of the Enter widget that goes on a customer's website.
We also share information when the law requires it — a subpoena, a court order, or another legal process — or where we reasonably need to in order to investigate fraud or a security problem, or to protect someone's safety. If Enter is ever sold or merged, information moves with the business, and we will say so before it does.
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in U.S. state privacy law.
How long it is kept
While a business's account is open, its conversations and contacts are kept, because they are that business's record of its own customers. They are not deleted on a timer.
A business can delete a conversation or a contact at any time, and can ask us to delete everything. Ask and we will do it, and we will confirm when it is done.
We keep what the law requires us to keep — billing records, for example — and we keep backups for a short period after a deletion, which is a consequence of having backups at all rather than a second copy we are holding on to.
Security
Conversations are stored per site, and a site's data is reachable only by that account. The dashboard refuses to be framed and sends no referrer. Access to production data is limited to the people who need it to operate the service.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will tell you, and we will tell you what we know rather than the least we can get away with.
Getting it back, or getting rid of it
If you run a business on Enter, the conversations and contacts are yours. Ask and we will export them or delete them.
If you talked to Enter on a business's website and want your details removed, the business is the right first stop — they are the ones who hold them. Contact us as well and we will help them do it.
Depending on where you live, you may have rights to know what we hold, to correct it, to delete it, to a copy of it, and not to be discriminated against for exercising any of them. Ask us and we will honor them. We will not make you create an account to do it.
Children
Enter is a tool for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child's information has reached us, tell us and we will delete it.
Changes to this policy
If we change this policy in a way that matters, we will say so here and date it, and we will tell account holders directly rather than hoping they re-read the page.
Contact us
Questions or requests about this Privacy Policy or your information? Reach us at:
Sigma7 Group, Inc.
Email: legal [at] enterhq.ai